80 matches found
CVE-2022-32046
TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN0041880c...
CVE-2022-32051
CVE-2022-32051 concerns the TOTOLINK T6 router. A stack overflow is triggered in FUN_004133c4 via the desc, week, sTime, and eTime parameters, with input length not checked, affecting TOTOLINK T6 version 4.1.9cu.5179_B20201015. The vulnerability can cause a denial of service due to uncontrolled s...
CVE-2022-32052
TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN004137a4...
CVE-2022-32052
Summary: CVE-2022-32052 affects TOTOLINK T6, firmware 4.1.9cu.5179_B20201015. A stack overflow was found in function FUN_004137a4 triggered by the desc parameter. Public sources describe potential denial of service, with Red Hat/NVD references noting high-severity (CVSS v3.1 base 7.5) and network...
PT-2022-21069 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the desc parameter in the function FUN 00413be4. This issue affects the TOTOLINK T6 device. Recommendations: For TOTOLINK T6 version 4.1.9cu.517...
PT-2022-21077 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the desc parameter in the function FUN 004137a4. This issue can be exploited, potentially allowing attackers to execute arbitrary code...
TOTOLINK T6 缓冲区错误漏洞
TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 version V4.1.9cu.5179B20201015, which stems from the desc parameter in the FUN004137a4 function not checking its length for input data. A remote attacker can exploi...
PT-2022-21071 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the desc parameter in the function FUN 00412ef4. This issue can be exploited, potentially leading to unintended consequences. Recommendations: F...
PT-2022-21070 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the desc parameter in the function FUN 0041880c. This issue can be exploited, potentially leading to unintended consequences. Recommendations: F...
pfSense HAProxy package cross-site scripting vulnerability
pfsense is an open source routing and firewall software , based on freebsd system customization and development . A cross-site scripting vulnerability exists in pfSense's HAProxy package before version 0.5916. A remote attacker can use this vulnerability to inject arbitrary Web script or HTML wit...
CVE-2019-8953
The HAProxy package before 0.5916 for pfSense has XSS via the desc aka Description or tableactionsaclN parameter, related to haproxylisteners.php and haproxylistenersedit.php...
AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico Cross-Site Scripting Vulnerability
AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico is a cloud-based software, also available as an app, which, in addition to the standardized corporate management, also has specialized functions for the management of the learning process, with the goal of supporting the management of teachers...
CVE-2018-10138
The CATALooK.netStore module through 7.2.8 for DNN formerly DotNetNuke allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter...
CVE-2018-10138
The CATALooK.netStore module through 7.2.8 for DNN formerly DotNetNuke allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter...
CVE-2017-17919
SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...
CVE-2017-17919
SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...
CVE-2014-7987
Cross-site scripting XSS vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.101 allow remote attackers to inject arbitrary web script or HTML via the 1 propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, 2...
CVE-2006-3328
newticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication credentials via an IMG tag in the desc parameter "Ticket Description" field that points to a URL that captures referer URLs, possibly due to a cross-site scripting XSS vulnerability or a leak of...
